can anyone tell me what is the step to restore the data from tape?
Let say that if the tape lost, even the catalog tape also lost together with it.
so any possible the outsider able to retrieve the data using both of the tape?
(as i know that the encryption key will store inside the catalog and
There is no default encryption on TSM Server.
For hardware encryption you need to look into drive configuration.
Software encryption is supported by TSM Client and TDP (API).
For example, we need to encrypt all information related to Oracle databases on
AIX logical partition (database dumps
I would say there are 4 types of encryption. (Chapter 14 in the 5.5 Admin
Guide covers alot of this)
- TSM Client level encryption (using the include.encrypt and various
client options) Data is encrypted before sending to the TSM server.
(software based)
- TSM Server level encryption (using
Conclude that the TSM encryption can categories by two types: 1)
Software/application layer encryption 2) Hardware layer encryption (Tape drive).
Question:
1) Does TSM has any data protection other than this two? Does TSM has default
encryption if we never configure any setting to enable
ekm encryption is negligible. not sure about tklm. any takers on that?
On Mon, Jun 13, 2011 at 12:13 AM, Mehdi Salehi ezzo...@gmail.com wrote:
How much performance degradation would there if encryption is on? Although
it is the duty of drive itself (I suppose), it might have negative
I thought a setup step was required on the 3584 to: [+] Library / Logical
Libraries / Modify Encryption Method / Application-Managed Apply
Yes/No?
Keith
To: ADSM-L@VM.MARIST.EDU
Subject: Re: [ADSM-L] tape encryption in TSM environment
How much performance degradation would there if encryption is on? Although it
is the duty of drive itself (I suppose), it might have negative influence on
backup and even restore performance?
Yes.
-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of Keith
Arbogast
Sent: Monday, June 13, 2011 8:20 AM
To: ADSM-L@VM.MARIST.EDU
Subject: Re: [ADSM-L] tape encryption in TSM environment
I thought a setup step was required on the 3584
: [ADSM-L] tape encryption in TSM environment
How much performance degradation would there if encryption is on?
Although
it is the duty of drive itself (I suppose), it might have negative
influence
on backup and even restore performance?
.
-Jeff
-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@vm.marist.edu] On Behalf Of
Howard Coles
Sent: Monday, June 13, 2011 1:52 PM
To: ADSM-L@vm.marist.edu
Subject: Re: [ADSM-L] tape encryption in TSM environment
Using a TKLM server you can point your Library to the IP
John 3:16!
-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of
Mehdi Salehi
Sent: Sunday, June 12, 2011 11:13 PM
To: ADSM-L@VM.MARIST.EDU
Subject: Re: [ADSM-L] tape encryption in TSM environment
How much performance degradation would
Someone here is not willing to bet his career on the reliability of a TSM
server managed encryption key. He reasons that if a key is lost on the TSM
server side of backups, the data could not be recovered, and we would be
accountable. If a client admin loses an encryption key, he is accountable
With TSM, you are already assuming the database will be consistent to be
able to restore anything, encryption or not.
TSM isn't more or less likely to lose an application managed encryption
key than it will lose an inventory reference to any particular file.
WIth Application managed encryption
On 13 jun 2011, at 21:53, Keith Arbogast wrote:
Someone here is not willing to bet his career on the reliability of a TSM
server managed encryption key. He reasons that if a key is lost on the TSM
server side of backups, the data could not be recovered, and we would be
accountable
Hi,
On 12 jun 2011, at 05:53, Mehdi Salehi wrote:
Hi,
Tape volumes canned be accessed if there is no TSM database. If happens,
this is not exactly true. The tapes can be accessed. IBM just claims that it's
hard/impossible to make sense of the data. That may or may not be true. There
are
Yes but you need to use TKLM or its MF equiv to be of value unless you
use an appliiance.
On 6/11/11, Mehdi Salehi ezzo...@gmail.com wrote:
Hi,
Tape volumes canned be accessed if there is no TSM database. If happens,
restoring the database and gaining access to data seem to be very difficult
.
As a result, most of my customers who send tapes offsite use TSM encryption.
The ones with the most sensitive data (financial and medical companies) use
encryption for tapes that stay onsite, as well.
-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf
How much performance degradation would there if encryption is on? Although
it is the duty of drive itself (I suppose), it might have negative influence
on backup and even restore performance?
Hi,
Tape volumes canned be accessed if there is no TSM database. If happens,
restoring the database and gaining access to data seem to be very difficult
(at least for me ;) ). Do you think encryption feature of tape drives has
any value in TSM environments?
Thank you,
Mehdi
Dear TSM practitioner,
I want to ask what is best practice Encrytion in TSM ? I have plann to
encrypt every database backup using TSM, how many percent it would
effect the performance comparing backup not using encryption?
--
Best Regards,
Martin Panggabean
Technical Consultant
PT. Niaga
Well, TSM does support encryption and works well as its own key manager.
However, this does not encrypt the TSM database. For this, you will need
an external key manager to encrypt database tapes. Of course, this
starts the whole discussion of then how do you backup the key manager
that's
Probably the best way to do TSM db encryption would be with an external
in-line encryption device (like, say, a NetApp DataFort box) to encrypt
the disk that the db resides on.
--
Mark Stapleton ([EMAIL PROTECTED])
CDW Berbee
System engineer
7145 Boone Avenue North, Suite 140
Brooklyn Park MN
.
-Original Message-
From: ADSM: Dist Stor Manager [mailto:[EMAIL PROTECTED] On Behalf Of
Chris Koster
Sent: Wednesday, December 03, 2008 10:39 AM
To: ADSM-L@VM.MARIST.EDU
Subject: Re: Encryption in TSM ??
Well, TSM does support encryption and works well as its own key manager.
However
. TSM client encryption is VERY easy to implement. Key
management is hard.
Or, you can do the encryption in hardware:
You can put encryption devices in your network, so that all the data is
encrypted BEFORE it reaches the TSM server.
Or you can put an encrytpion device between your TSM server
Liberty Bank
860.638.2919
[EMAIL PROTECTED]
~~ _/) ~~
-Original Message-
From: ADSM: Dist Stor Manager [mailto:[EMAIL PROTECTED] On Behalf Of
Aaron Becar
Sent: Thursday, January 12, 2006 8:00 PM
To: ADSM-L@VM.MARIST.EDU
Subject: Re: tape encryption and TSM
Unless you are willing
On Jan 13, 2006, at 8:30 AM, Murray, Jim wrote:
I would be more interested in the answer not so much as recovery of
data
but in securing data. Being a financial institution we have
regulatory
requirements for data protection, new State laws say I must encrypt
all
data on tape that is moved off
Hi Jim,
I believe that client-sided/initiated
encryption is your only 'native' option here - prior to TSM 5.3, the 56bit
DES encryption provided simply wasn't enough for some institutions, but
with TSM 5.3,128bit AES encryption for both BA client *and* API backups
(i.e. TDP's) has been brought
:To
Dist Stor ADSM-L@VM.MARIST.EDU
Manager cc
[EMAIL PROTECTED]
.EDU Subject
Re: tape encryption and TSM
tapes written by TSM without having the DB
has
come up before, but I'm wondering if anything has changed from a couple
of
years ago with the implementation of 5.3 so here are a few questions.
How hard is it to read tapes without the TSM database tape?
Is there any tape encryption with TSM
63141
Phone: 314-989-3839 Cell: 314-225-9997 Email: [EMAIL PROTECTED]
-Original Message-
From: ADSM: Dist Stor Manager [mailto:[EMAIL PROTECTED] On Behalf Of
Richard Sims
Sent: Friday, January 13, 2006 7:39 AM
To: ADSM-L@VM.MARIST.EDU
Subject: Re: [ADSM-L] tape encryption and TSM
On Jan
tape encryption with TSM 5.3?
Besides encrypting data from the client to the server is there anything else
that can be done?
What type of hit does encryption take on the client/server when in use?
Thanks,
Geoff Gill
TSM Administrator
SAIC M/S-G1b
(858)826-4062
Email: mailto:[EMAIL
is it to read tapes without the TSM database tape?
Is there any tape encryption with TSM 5.3?
Besides encrypting data from the client to the server is there anything
else
that can be done?
What type of hit does encryption take on the client/server when in
use?
Thanks,
Geoff Gill
TSM
On Wed, Sep 18, 2002 at 09:49:07AM -0400, Jelinek, David G. wrote:
Has anyone heard if there are any plans to increase the encryption
strength from 56 bit DES to at least 1024 bit? We have requirements
because of the HIPAA (Health Information Portability and Accountability
Act) stuff. Thanks
Has anyone heard if there are any plans to increase the encryption
strength from 56 bit DES to at least 1024 bit? We have requirements
because of the HIPAA (Health Information Portability and Accountability
Act) stuff. Thanks in advance.
David Jelinek
BEGIN:VCARD
VERSION:2.1
N:Jelinek;David
.
Technical Specialist
Naptheon Inc.
757-688-8180
-Original Message-
From: Jelinek, David G. [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 18, 2002 9:49 AM
To: [EMAIL PROTECTED]
Subject: Future plans for encryption in TSM
Has anyone heard if there are any plans to increase the encryption
or other file encryption
tool might be much more suitable than internal TSM encryption.
My 0.02 BGN
Zlatko Krastev
IT Consultant
P.S. Petur, you can contact me if you want. This is more security than
TSM-related, so please do it outside the list.
Zlatko
Please respond to ADSM: Dist Stor
now how ctritical this database is and how
protection of it is essential.
This is what i have understand of you guys so far.
Encryption in TSM is always done on the TSM B/A-Client there do you put a
56bit encryption key on the data witch cannot be
retreved without the key. So they need to come
This is what i have understand of you guys so far.
Encryption in TSM is always done on the TSM B/A-Client there do you put a
56bit encryption key on the data witch cannot be
retreved without the key. So they need to come up with some sort of disaster
Recovery plan, regarding the key
spooky.
You guys can hopfully see now how ctritical this database is and how
protection of it is essential.
Personally, I can't imagine a use for it, but I'm not a biotech geek. =)
This is what i have understand of you guys so far.
Encryption in TSM is always done on the TSM B/A-Client there do
: don?t aynone know anything about Encryption in TSM.
This is what i have understand of you guys so far.
Encryption in TSM is always done on the TSM B/A-Client there do you put
a
56bit encryption key on the data witch cannot be
retreved without the key. So they need to come up with some sort
one with encryption support.
I think the encryption in TSM is more for users like me (the TSM Client,
not the TSM Admin). I work remote from a company site, so all of my data
goes over a VPN network. By encrypting the data going across the line, I'm
protected from any hacker kiddies out there who
Derrick [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 05, 2002 9:47 AM
To: [EMAIL PROTECTED]
Subject: Re: don?t aynone know anything about Encryption in TSM.
when i said that they have extremely valible data i am meaning that
this genetic reasearch company has the medical records, detatild
not the problem
the problem is to sell them TSM.
they curently are using HP omniback
they where asking alot of questions about encryption in TSM and I didn?t
have all the answers for them. so that?s why this conversations began.
Kvedja/Regards
Petur Eythorsson
Taeknimadur/Technician
IBM Certified
105 Iceland
URL:http://www.nyherji.is
-Original Message-
From: ADSM: Dist Stor Manager [mailto:[EMAIL PROTECTED]]On Behalf Of
Justin Derrick
Sent: 3. apríl 2002 15:08
To: [EMAIL PROTECTED]
Subject: Re: don´t aynone know anything about Encryption in TSM.
Um, why
05:28 PM
Please respond to ADSM: Dist Stor Manager
To: [EMAIL PROTECTED]
cc:
Subject:RE: don´t aynone know anything about Encryption in TSM.
Andy,
What could a customer do for DR of a client which lost it's encryption
key and needed to restore data from
anything about Encryption in TSM.
Andy,
What could a customer do for DR of a client which lost it's encryption
key and needed to restore data from the TSM backup (encrypted).
--
Joshua S. Bassi
Sr. Solutions Architect @ rs-unix.com
IBM Certified - AIX/HACMP, SAN, Shark
Tivoli Certified Consultant
(unless they can hack it, but then any encryption scheme is subject to
hacking).
And this is a very important point. I could be wrong, but I seem to
recall that TSM's encryption uses straight up DES, which uses a 56 bit
key.
It has been proven that very determined people can brute force 56
(unless they can hack it, but then any encryption scheme is subject to
hacking).
And this is a very important point. I could be wrong, but I seem to
recall that TSM's encryption uses straight up DES, which uses a 56 bit
key.
Yes, NIST has been looking for a replacement for DES for decades.
2002 15:45
To: [EMAIL PROTECTED]
Subject: Re: don´t aynone know anything about Encryption in TSM.
There is no additional encryption performed by the TSM server. The
encrypted data sent by the client remains, of course, encrypted when it is
copied to a copy storage pool or backup set (or anywhere
-Original Message-
From: ADSM: Dist Stor Manager [mailto:[EMAIL PROTECTED]] On Behalf Of
Andrew Raibeck
Sent: Tuesday, April 02, 2002 7:45 AM
To: [EMAIL PROTECTED]
Subject: Re: don´t aynone know anything about Encryption in TSM.
There is no additional encryption performed by the TSM server
PROTECTED]
Sent by: ADSM: Dist Stor Manager [EMAIL PROTECTED]
04/03/2002 16:28
Please respond to ADSM: Dist Stor Manager
To: [EMAIL PROTECTED]
cc:
Subject:RE: don´t aynone know anything about Encryption in TSM.
Andy,
What could a customer do for DR of a client
valible data witch may not get in the wrong hands.
I have been reading up on Encryption in TSM and found it to be only desingd
to protect the data on the way
to the TSM server. I found no info on werther the data would be Encrypted in
the storage pools.
My question.
Is it possible to make
PROTECTED]
Subject: don´t aynone know anything about Encryption in TSM.
Hi i have posted this 2 times before here but havent receved a reply yet.
thus led me to belive that knowlegde on this is wery limited.
I have a big custemer who is considerating TSM for there backup system.
However
From where did you get your information about TSM encryption? When files
are included for encryption, the data is encrypted when it is sent to the
server. The server does not decrypt it before putting it in the storage
pools.
Regards,
Andy
Andy Raibeck
IBM Software Group
Tivoli Storage
for the server to de-crypt the data before
storage.
Please let me know, as I would like to look at the documentation.
Jack
From: Pétur Eyþórsson [EMAIL PROTECTED]
Date: 2002/04/02 Tue AM 07:04:45 EST
To: [EMAIL PROTECTED]
Subject: don´t aynone know anything about Encryption in TSM.
Hi i
Magill [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 02, 2002 9:10 AM
To: [EMAIL PROTECTED]
Subject: Re: =?8859_1?B?ZG9utHQg?=aynone know anything about Encryption
in TSM.
Hi, I was just wondering where you found the information stating that the
data was only protected on the way to the server
not matter if the data is Encrypted on the way to the TSM, it
only matters if i can secure the data offsite? And i havent read anything
about that in TSM only about Encryption in TSM for clients.
Kvedja/Regards
Petur Eythorsson
Taeknimadur/Technician
IBM Certified Specialist - AIX
Tivoli Storage Manager
to
hacking).
Except for TSM client encryption, there are no other TSM-enabled means of
encrypting the data.
Regards,
Andy
Andy Raibeck
IBM Software Group
Tivoli Storage Manager Client Development
Internal Notes e-mail: Andrew Raibeck/Tucson/IBM@IBMUS
Internet e-mail: [EMAIL PROTECTED]
The only dumb
My understanding from what I've read (I've never used it) is...
Clients set an encryption key (password) on the files they'd like to protect.
Files are sent to the TSM server, encrypted.
The TSM server does NOT have the encryption key, although the key may be
saved to disk on a client's
Raibeck
Sent: 2. apríl 2002 15:45
To: [EMAIL PROTECTED]
Subject: Re: don´t aynone know anything about Encryption in TSM.
There is no additional encryption performed by the TSM server. The
encrypted data sent by the client remains, of course, encrypted when it is
copied to a copy storage pool
]
cc:
Subject:RE: don´t aynone know anything about Encryption in TSM.
thanks you all for your answers.
But i just want to make one thing sure.
I still need the Encryption key for the Backup Sets if i back up the
client
with Encryption?
Kvedja/Regards
Petur Eythorsson
: Jack Magill [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 02, 2002 9:10 AM
To: [EMAIL PROTECTED]
Subject: Re: =?8859_1?B?ZG9utHQg?=aynone know anything about Encryption
in TSM.
Hi, I was just wondering where you found the information stating that the
data was only protected on the way
Hi i am wondering about security in TSM.
If i have a backupset, is it posible to encrypt it so that people cant use
it without a password.
If i use the encript enhancement does it encrypt the data to the tape?
Kvedja/Regards
Petur Eythorsson
Taeknimadur/Technician
IBM Certified Specialist
63 matches
Mail list logo
